Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Client-built.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Client-built.exe

  • Size

    3.1MB

  • MD5

    cdadc74f3cb613d84558ecaf3e28b573

  • SHA1

    d4a77a1ac3987a3f6ee042871ae17c7d9db6cd0b

  • SHA256

    7ceb557b1ecc941f5a2804c0f40899bdc2e7f7c820e05f7c4e0e89303c360037

  • SHA512

    a66e1657407423697fefc477fed384d20762da4b0280e490fb57426483403a30ad1d8feb0c1c760192cda6c889389b701d4ec90fda63dedf176c975918d916d1

  • SSDEEP

    49152:2vIt62XlaSFNWPjljiFa2RoUYIto5baoGdtm8+THHB72eh2NT:2vE62XlaSFNWPjljiFXRoUYIto5eU

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

C2

138.0.54.91:4782

Mutex

63563c99-67f3-4d20-8c7f-230c3d970b36

Attributes
  • encryption_key

    E22572FBAE45F5F894074ED475A27E306499B335

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Microsoft Link

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client-built.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.